What's changed
- Raised the supported Python baseline to Python 3.10.
- Added compatibility with Cryptography 49 through the unmarked
cryptography>=45.0.5,<50.0.0dependency range. - Removed legacy Python 3.8/3.9 dependency-resolution branches and aligned package metadata, Ruff, tox, and CI with Python 3.10–3.14.
- Added negative AES-GCM/JWKS secret tests for invalid key length, malformed payloads, and authenticated-decryption failure.
Compatibility and upgrade notes
This release no longer installs on Python 3.8 or 3.9. Applications that still require those Python versions must remain on GCL IAM 1.3.1.
There are no application API changes for supported Python versions. RSA/PEM, HS256/RS256, JWKS, token handling, package builds, and dependent plugin integration were validated with Cryptography 49.
Full changelog: 1.3.1...1.3.2